Extracted

• • Target

    c3742ce15e7555c610350d84f0ec719257c8e050ff7e092215c28227df257771N

  • Size

    282KB

  • MD5

    9010eafd8de9808250fa411903e0f650

  • SHA1

    413272f54a551b29fda7911695b9e0ebd68eb9db

  • SHA256

    c3742ce15e7555c610350d84f0ec719257c8e050ff7e092215c28227df257771

  • SHA512

    e51f9064c1fc51aba4807f3576bc0547fa0a208cb716f88284db541062342e065f28ffa0f1735eb8689d3028071f3e4272ccb5009d7589a16e0e5c7a950a433f

  • SSDEEP

    6144:ULgwg+KarBF18AJ2jwF3K655LTwVy03n:U0wg+KarH18AJb3PgVh3n

  Score

  10^/10

  gcleanerdiscoveryloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2